Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
angular/@angular/bazel may allow code execution
published 3 months ago
Summary
A security weakness in the Angular Bazel package could let an attacker run unwanted code on your system. The issue is fixed in the updated version 13.3.12-tuxcare.3. Install the new package as soon as possible to protect your applications.
What to do
- Update angular @angular/bazel to version 13.3.12-tuxcare.3.
- Update angular @angular/benchpress to version 13.3.12-tuxcare.3.
- Update angular @angular/common to version 13.3.12-tuxcare.3.
- Update angular @angular/compiler to version 13.3.12-tuxcare.3.
- Update angular @angular/compiler-cli to version 13.3.12-tuxcare.3.
- Update angular @angular/core to version 13.3.12-tuxcare.3.
- Update angular @angular/elements to version 13.3.12-tuxcare.3.
- Update angular @angular/forms to version 13.3.12-tuxcare.3.
- Update angular @angular/language-service to version 13.3.12-tuxcare.3.
- Update angular @angular/localize to version 13.3.12-tuxcare.3.
- Update angular @angular/platform-browser to version 13.3.12-tuxcare.3.
- Update angular @angular/platform-browser-dynamic to version 13.3.12-tuxcare.3.
- Update angular @angular/platform-server to version 13.3.12-tuxcare.3.
- Update angular @angular/router to version 13.3.12-tuxcare.3.
- Update angular @angular/service-worker to version 13.3.12-tuxcare.3.
- Update angular @angular/upgrade to version 13.3.12-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | angular | @angular/bazel |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/benchpress |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/common |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/compiler |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/compiler-cli |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/core |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/elements |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/forms |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/language-service |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/localize |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/platform-browser |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/platform-browser-dynamic |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/platform-server |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/router |
< 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/service-worker |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
| TuxCare:npm | angular | @angular/upgrade |
< 13.3.12-tuxcare.3 >= 13.3.12-tuxcare.0, < 13.3.12-tuxcare.3 Fix: upgrade to 13.3.12-tuxcare.3
|
Original advisory text
TuxCare security update for @angular/bazel (1 CVE)
TuxCare rebuilt @angular/bazel to address 1 CVE. Fixed in 13.3.12-tuxcare.3.
Timeline
Published4 Aug 2026
Updated30 Oct 2026
First seen13 Oct 2026
Sources
CLSA-2026-1783213296 · OSV
Track software like this
Free during beta